On 03/08/2018 08:33 PM, Natxo Asenjo via FreeIPA-users wrote:
anyone?
On Wed, Mar 7, 2018 at 8:33 PM, Natxo Asenjo <natxo.asenjo(a)gmail.com
<mailto:natxo.asenjo@gmail.com>> wrote:
hi,
I want to try the vault but when I tried installing it it failed.
Unfortunately the error log got overwritten the next time I tried to
install it, so now I am stuck.
Hi,
unfortunately when KRA installation failed, IPA does not provide any
tool to remove the remnants of the failed installation, and you need to
uninstall the IPA server and retry the installation.
In order to diagnose the issue, you may find logs in
/var/log/pki/pki-ca-spawn.$date.log (there is a new log file for each try).
Flo
This is what I get:
# ipa-kra-install
Directory Manager password:
Directory Manager password is invalid
The ipa-kra-install command failed. See
/var/log/ipaserver-kra-install.log for more information
# ipa-kra-install
Directory Manager password:
KRA already installed
The ipa-kra-install command failed. See
/var/log/ipaserver-kra-install.log for more information
# cat /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG Logging to /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG ipa-kra-install was invoked with
arguments [] and options: {'verbose': False, 'no_host_dns': False,
'quiet': False, 'log_file': None, 'unattended': False,
'uninstall':
False}
2018-03-07T19:23:05Z DEBUG IPA version 4.5.0-22.el7.centos
2018-03-07T19:23:05Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2018-03-07T19:23:05Z DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2018-03-07T19:23:05Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172,
in execute
return_value = self.run()
File
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py",
line 155, in run
raise admintool.ScriptError("KRA already installed")
2018-03-07T19:23:05Z DEBUG The ipa-kra-install command failed,
exception: ScriptError: KRA already installed
2018-03-07T19:23:05Z ERROR KRA already installed
2018-03-07T19:23:05Z ERROR The ipa-kra-install command failed. See
/var/log/ipaserver-kra-install.log for more information
Scrolling upwards I see this in my terminal (output of my first try):
[admin@kdc1 ~]$ sudo ipa-kra-install
Directory Manager password:
===================================================================
This program will setup Dogtag KRA for the IPA Server.
Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes
[1/9]: configuring KRA instance
Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA
-f /tmp/tmpTHe4sL' returned non-zero exit status 1
See the installation logs and the following files/directories for
more information:
/var/log/pki/pki-tomcat
[error] RuntimeError: KRA configuration failed.
Your system may be partly configured.
If you run into issues, you may have to re-install IPA on this server.
KRA configuration failed.
The ipa-kra-install command failed. See
/var/log/ipaserver-kra-install.log for more information
So does this mean my ipaserver is fubar? Not a huge problem because
this is my test system, but ..., well, that would be a bit
disappointing.
--
regards,
Natxo
--
--
Groeten,
natxo
--
--
Groeten,
natxo
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org